Example #1
0
function olpay_end($numcode)
{
    global $db, $pre, $webdb, $banktype, $pay_code, $lfjuid;
    $pay_code = str_replace('QIBO', '=', $pay_code);
    //这个符号“=”容易出问题
    if (!$pay_code) {
        showerr("数据有误!!");
    }
    list($type, $atc_moeny, $atc_numcode, $mid, $shopmoney) = explode("\t", mymd5($pay_code, 'DE'));
    if ($atc_numcode != intval($numcode)) {
        showerr("数据被修改过!!");
    }
    //主要是针对支付宝不能单纯一位数字的问题,inc/olpay/alipay.php,文件中做了修改
    $numcode = str_replace("code", "", $numcode);
    //万能表单订单
    if ($type == 'form') {
        $rt = $db->get_one("SELECT * FROM {$pre}olpay WHERE numcode='{$numcode}' AND `formid`='{$mid}'");
        //商城订单
    } elseif ($type == 'module') {
        $rt = $db->get_one("SELECT * FROM {$pre}olpay WHERE numcode='{$numcode}' AND `moduleid`='{$mid}'");
        $db->query("UPDATE {$pre}shoporderuser SET ifpay='1' WHERE id='{$atc_numcode}'");
        //奖励积分
        if ($shopmoney) {
            add_user($lfjuid, $shopmoney, '购买商品得分');
        }
    }
    if (!$rt) {
        showerr('系统中没有您的订单,无法完成支付!');
    }
    if ($rt['ifpay'] == 1) {
        showerr('该订单已经支付成功!');
    }
    $db->query("UPDATE {$pre}olpay SET ifpay='1' WHERE id='{$rt['id']}'");
    refreshto("{$webdb['www_url']}/", "恭喜你支付成功", 60);
}
Example #2
0
function ck_regpost($postdb)
{
    global $webdb;
    $array = unserialize(StripSlashes($webdb[Reg_Field]));
    foreach ($array[field_db] as $key => $rs) {
        if ($rs[mustfill] == 1 && $postdb[$rs[field_name]] === '') {
            showerr("{$rs[title]}不能为空");
        }
        if ($rs[field_type] == 'int' && $postdb[$rs[field_name]] && !ereg("^[-0-9]+\$", $postdb[$rs[field_name]])) {
            showerr("{$rs[title]}只能为数字");
        }
        if ($rs[field_type] == 'varchar') {
            $rs[field_leng] = $rs[field_leng] ? $rs[field_leng] : 255;
            if (strlen($postdb[$rs[field_name]]) > $rs[field_leng]) {
                showerr("{$rs[title]}不能超过{$rs[field_leng]}个字符,一个汉字等于两个字符");
            }
        }
        if ($rs[field_type] == 'int') {
            $rs[field_leng] = $rs[field_leng] ? $rs[field_leng] : 10;
            if (strlen($postdb[$rs[field_name]]) > $rs[field_leng]) {
                showerr("{$rs[title]}不能超过{$rs[field_leng]}个字符");
            }
        }
    }
}
Example #3
0
function olpay_end($numcode)
{
    global $db, $pre, $webdb, $banktype;
    $rt = $db->get_one("SELECT * FROM {$pre}olpay WHERE numcode='{$numcode}' AND `paytype`=1");
    if (!$rt) {
        showerr('系统中没有您的充值订单,无法完成充值!');
    }
    if ($rt['ifpay'] == 1) {
        showerr('该订单已经充值成功!');
    }
    $db->query("UPDATE {$pre}olpay SET ifpay='1' WHERE id='{$rt['id']}'");
    $num = $rt[money] * $webdb[alipay_scale];
    add_user($rt[uid], $num, '在线充值');
    refreshto("{$webdb['www_url']}/", "恭喜你充值成功", 10);
}
Example #4
0
/**
*检查是否误操作.设置子栏目为自己的父栏目
**/
function check_fup($table, $fid, $fup)
{
    global $db;
    if (!$fup) {
        return;
    } elseif ($fid == $fup) {
        showerr("不能设置自身为父栏目");
    }
    $query = $db->query("SELECT * FROM {$table} WHERE fid='{$fup}'");
    while ($rs = $db->fetch_array($query)) {
        if ($rs[fup] == $fid) {
            showerr("你不能设置本身的子栏目作为父栏目,这是不允许的.但你可以设置其他子栏目作为父栏目");
        } elseif ($rs[fup]) {
            check_fup($table, $fid, $rs[fup]);
        }
    }
}
Example #5
0
<?php

require dirname(__FILE__) . "/global.php";
if (!$lfjid) {
    showerr('请先登录!');
}
if ($job == 'post') {
    $rsdb = $db->get_one("SELECT * FROM {$_pre}content WHERE id='{$id}'");
    if (!$rsdb) {
        showerr('职位不存在!');
    }
    if ($db->get_one("SELECT * FROM {$_pre}apply WHERE cid='{$id}' AND uid='{$lfjuid}'")) {
        showerr('你已经申请过该职位了!');
    }
    @extract($db->get_one("SELECT id AS join_id FROM {$_pre}person WHERE uid='{$lfjuid}'"));
    $db->query("INSERT INTO {$_pre}apply SET cid='{$id}',uid='{$lfjuid}',join_id='{$join_id}',posttime='{$timestamp}'");
    refreshto("./", '申请成功', 1);
}
Example #6
0
 if (!is_writable(ROOT_PATH . "{$postdb['dirname']}/data/")) {
     showerr(ROOT_PATH . "{$postdb['dirname']}/data/" . "目录不可写");
 }
 $db->query("UPDATE {$pre}module SET name='{$postdb['name']}',dirname='{$postdb['dirname']}',admindir='{$postdb['admindir']}',domain='{$postdb['domain']}',list='{$postdb['list']}',adminmember='{$postdb['adminmember']}',ifclose='{$postdb['ifclose']}',ifsys='{$postdb['ifsys']}' WHERE id='{$id}'");
 make_module_cache();
 @extract($db->get_one("SELECT pre AS Mpre,id AS Mid,type AS Type FROM `{$pre}module` WHERE id='{$id}' "));
 if ($Type) {
     $table = "{$pre}{$Mpre}config";
 } else {
     $table = "{$pre}{$Mpre}_config";
 }
 if (!is_table($table)) {
     jump("修改成功!", "index.php?lfj=module&job=list", 1);
 }
 if (!is_writable(ROOT_PATH . "{$postdb['dirname']}/data/config.php")) {
     showerr(ROOT_PATH . "{$postdb['dirname']}/data/config.php" . "文件不可写");
 }
 $db->query("DELETE FROM `{$table}` WHERE c_key='module_id'");
 $db->query("DELETE FROM `{$table}` WHERE c_key='module_pre'");
 $db->query("DELETE FROM `{$table}` WHERE c_key='module_close'");
 $db->query("INSERT INTO `{$table}` ( `c_key` , `c_value` , `c_descrip` ) VALUES ('module_id', '{$Mid}', '')");
 $db->query("INSERT INTO `{$table}` ( `c_key` , `c_value` , `c_descrip` ) VALUES ('module_pre', '{$Mpre}', '')");
 $db->query("INSERT INTO `{$table}` ( `c_key` , `c_value` , `c_descrip` ) VALUES ('module_close', '{$postdb['ifclose']}', '')");
 $writefile = "<?php\r\n";
 $query = $db->query("SELECT * FROM `{$table}`");
 while ($rs = $db->fetch_array($query)) {
     $rs[c_value] = addslashes($rs[c_value]);
     $writefile .= "\$webdb['{$rs['c_key']}']='{$rs['c_value']}';\r\n";
 }
 write_file(ROOT_PATH . "{$postdb['dirname']}/data/config.php", $writefile);
 jump("修改成功", "index.php?lfj=module&job=list", 1);
Example #7
0
 $fcp->next_record();
 $total = (int) $fcp->f("cnt");
 $fcp->free_result();
 $count = $total;
 // this because the "got" count below is commented out
 if (!empty($cat)) {
     // check to see whether subcats exist under this cat
     $check_sub = new FC_SQL();
     $check_sub->query("select count(*) as cnt from cat where catunder={$cat}");
     $check_sub->next_record();
     $check_subc = (int) $check_sub->f("cnt");
     $check_sub->free_result();
 }
 // show error if no products and no subcats
 if (empty($count) and empty($check_subc)) {
     showerr();
 } else {
     // echo "select $fds from $tbs where $pj order by $srt<br />";
     $fcp->query("select distinct {$fds} from {$tbs} where {$pj} order by {$srt}");
     // THIS IS ONLY NEEDED DUE TO SOLID'S POOR LIMIT ABILITY...
     // if olimit>0, read off the first olimit rows
     if (!$psku && $olimit) {
         $i = 0;
         while ($i < $olimit) {
             $fcp->next_record();
             $i++;
         }
     }
     if (!empty($key1)) {
         // log keyword search results
         $key1 = strtolower($key1);
Example #8
0
<?php

if (!function_exists('html')) {
    die('F');
}
if (!$lfjuid) {
    showerr('请先登录');
}
$_erp = $Fid_db[tableid][$fid];
$rs = $db->get_one("SELECT * FROM {$_pre}content{$_erp} WHERE id='{$id}'");
if ($rs[uid] != $lfjuid && !$web_admin) {
    showerr('你没权限');
}
$list = $timestamp + 3600 * 24 * $webdb[Info_TopDay];
if (!$web_admin) {
    $lfjdb[money] = intval(get_money($lfjuid));
    if ($lfjdb[money] < $webdb[Info_TopMoney]) {
        showerr("你的积分不足:{$webdb['Info_TopMoney']},不能选择置顶");
    }
    add_user($lfjuid, -intval($webdb[Info_TopMoney]), '置顶扣分');
}
$db->query("UPDATE {$_pre}content{$_erp} SET list='{$list}' WHERE id='{$id}'");
refreshto("{$FROMURL}", "置顶成功", 1);
Example #9
0
<?php

require dirname(__FILE__) . "/global.php";
if (!$lfjid) {
    showerr('请先登录!');
} elseif ($uid == $lfjuid) {
    showerr('你不能收录自己!');
}
if ($db->get_one("SELECT * FROM {$_pre}collection WHERE memberuid='{$uid}' AND companyuid='{$lfjuid}'")) {
    showerr('你已经收录过了!');
}
$db->query("INSERT INTO {$_pre}collection SET memberuid='{$uid}',companyuid='{$lfjuid}',posttime='{$timestamp}'");
refreshto($FROMURL, '收录成功', 3);
Example #10
0
         if (!$webdb[EditYzEmail]) {
             showerr("你不可以再修改邮箱,因为已经审核过了.");
         } else {
             $array[email_yz] = 0;
         }
     }
     if ($lfjdb[mob_yz] && $lfjdb[mobphone] != $mobphone) {
         if (!$webdb[EditYzMob]) {
             showerr("你不可以再修改手机号码,因为已经审核过了.");
         } else {
             $array[mob_yz] = 0;
         }
     }
     if ($lfjdb[idcard_yz] && ($lfjdb[idcard] != $idcard || $lfjdb[truename] != $truename)) {
         if (!$webdb[EditYzIdcard]) {
             showerr("你不可以再修改身份证资料,因为已经审核过了.");
         } else {
             $array[idcard_yz] = 0;
         }
     }
     $userDB->edit_user($array);
     //自定义用户字段
     Reg_memberdata_field($lfjuid, $postdb);
     //截取用户头像
     if ($icon_url) {
         $reurl = base64_encode("{$webdb['www_url']}/member/userinfo.php?uid={$lfjuid}");
         header("location:{$webdb['www_url']}/do/cutimg.php?job=cutimg&width=150&height=150&srcimg={$icon_url}&reurl={$reurl}");
         exit;
     }
     refreshto("{$FROMURL}", "修改成功", 1);
 } else {
Example #11
0
<?php

require "global.php";
$mid = 2;
$field_db = $module_DB[$mid]['field'];
$Lrows = 10;
$showpage = getpage("{$_pre}join A", "WHERE A.cid={$cid}", "?cid={$cid}", $Lrows);
unset($listdb);
if ($page < 1) {
    $page = 1;
}
$min = ($page - 1) * $Lrows;
$query = $db->query("SELECT A.*,B.*,C.* FROM {$_pre}join A LEFT JOIN {$_pre}content_{$mid} C ON A.id=C.id LEFT JOIN {$pre}memberdata B ON A.uid=B.uid WHERE A.cid='{$cid}' ORDER BY A.posttime DESC LIMIT {$min},{$Lrows}");
while ($rs = $db->fetch_array($query)) {
    $Module_db->showfield($field_db, $rs, 'list');
    $rs[username] || ($rs[username] = $rs[ip]);
    $rs[picurl] = tempdir($rs[icon]);
    $rs[posttime] = date("Y-m-d H:i:s", $rs[posttime]);
    $listdb[] = $rs;
}
$rs = $db->get_one("SELECT * FROM `{$_pre}content` WHERE id='{$cid}'");
if (!$lfjuid || $rs[uid] != $lfjuid) {
    showerr("ÄãÎÞȨ²é¿´");
}
require ROOT_PATH . "inc/head.php";
require getTpl("list_{$mid}");
require ROOT_PATH . "inc/foot.php";
Example #12
0
    }
    //投票项
    if ($job == 'postnew') {
        $votedb[_type][1] = $votedb[_limitip][0] = $votedb[_forbidguestvote][0] = $votedb[_votetype][0] = ' checked ';
        $listdb = array('1' => '', '2' => '', '3' => '');
    } elseif ($job == 'edit' && $rsdb[ifvote]) {
        $votedb = $db->get_one("SELECT * FROM `{$pre}vote_topic` WHERE aid='{$aid}'");
        $query = $db->query("SELECT * FROM `{$pre}vote_element` WHERE cid='{$votedb['cid']}' ORDER BY list DESC");
        $i = 0;
        while ($rs = $db->fetch_array($query)) {
            $i++;
            $votelistdb[$i] = $rs;
        }
        $votedb[_type][$votedb[type]] = " checked ";
        $votedb[_limitip][$votedb[limitip]] = " checked ";
        $votedb[_forbidguestvote][$votedb[forbidguestvote]] = " checked ";
        $votedb[_votetype][$votedb[votetype]] = ' checked ';
        $votedb[begintime] = $votedb[begintime] ? date("Y-m-d H:i:s", $votedb[begintime]) : '';
        $votedb[endtime] = $votedb[endtime] ? date("Y-m-d H:i:s", $votedb[endtime]) : '';
    }
    if ($aid) {
        $query = $db->query("SELECT * FROM {$pre}fu_article WHERE aid='{$aid}'");
        while ($rs = $db->fetch_array($query)) {
            $fu_fiddb[] = $rs[fid];
        }
    }
    $fu_sort = $Guidedb->Checkbox("{$pre}fu_sort", 'fu_fiddb[]', $fu_fiddb);
    if ($mid && !$article_moduleDB[$mid]) {
        showerr("当前模型不存在!");
    }
}
Example #13
0
<?php

define('Memberpath', dirname(__FILE__) . '/');
require Memberpath . "../global.php";
/**
*前台是否开放
**/
if ($webdb[module_close]) {
    $webdb[Info_closeWhy] = str_replace("\r\n", "<br>", $webdb[Info_closeWhy]);
    showerr("本系统暂时关闭:{$webdb['Info_closeWhy']}");
}
if (!$lfjid) {
    showerr("你还没登录");
}
Example #14
0
        } else {
            @extract($db->get_one("SELECT COUNT(*) AS pmNUM FROM {$TB_pre}pms WHERE `msgtoid`='{$lfjuid}' AND folder='inbox' AND new=1"));
        }
    } else {
        @extract($db->get_one("SELECT COUNT(*) AS pmNUM FROM `{$pre}pm` WHERE `touid`='{$lfjuid}' AND type='rebox' AND ifnew='1'"));
    }
    if (!$pmNUM) {
        $MSG = "<A target=\"_blank\" HREF=\"{$webdb['www_url']}/member/index.php?main=pm.php?job=list\">站内消息</A>";
    } else {
        $MSG = "<A target=\"_blank\" HREF=\"{$webdb['www_url']}/member/index.php?main=pm.php?job=list\" style=\"color:blue;\">你有新消息({$pmNUM})</a>";
    }
    $lfjdb[_lastvist] = date("Y-m-d H:i", $lfjdb[lastvist]);
    $lfjdb[_regdate] = date("Y-m-d H:i", $lfjdb[regdate]);
}
if ($styletype && !eregi("^[-_0-9a-z]+\$", $styletype)) {
    showerr("风格样式有误", 1);
} elseif (!$styletype) {
    $styletype = 0;
}
require_once html("login_tpl/{$styletype}");
$show = ob_get_contents();
ob_end_clean();
$show = str_replace(array("\n", "\r", "<!---->", "'"), array("", "", "", "\\'"), $show);
if ($webdb[www_url] == '/.') {
    $show = str_replace('/./', '/', $show);
}
if ($iframeID) {
    //框架方式不会拖慢主页面打开速度,推荐
    //处理跨域问题
    if ($webdb[cookieDomain]) {
        echo "<SCRIPT LANGUAGE=\"JavaScript\">document.domain = \"{$webdb['cookieDomain']}\";</SCRIPT>";
Example #15
0
if ($rsdb[style]) {
    $STYLE = $rsdb[style];
} elseif ($fidDB[style]) {
    $STYLE = $fidDB[style];
}
//SEO
$titleDB[title] = filtrate(strip_tags("{$rsdb['title']} - {$city_DB[name][$city_id]}{$fidDB['name']} - {$webdb['Info_webname']}"));
$titleDB[keywords] = filtrate(strip_tags($rsdb[keywords]));
$titleDB[description] = filtrate(get_word(strip_tags($rsdb[content]), 200)) . filtrate(strip_tags("{$fidDB['metadescription']} {$webdb['Info_metadescription']}"));
/**
*栏目指定了哪些用户组才能看信息内容
**/
if ($fidDB[allowviewcontent]) {
    if (!$web_admin && !in_array($groupdb[gid], explode(",", $fidDB[allowviewcontent]))) {
        if (!$lfjid || !in_array($lfjid, explode(",", $fidDB[admin]))) {
            showerr("你所在用户组,无权浏览");
        }
    }
}
/**
*对信息内容字段的处理
**/
$Module_db->hidefield = true;
$Module_db->classidShowAll = true;
$Module_db->showfield($field_db, $rsdb, 'show');
$rsdb[posttime] = date("Y-m-d H:i:s", $rsdb[posttime]);
$rsdb[picurl] && ($rsdb[picurl] = tempdir($rsdb[picurl]));
/**
*栏目模板优先于城市模板
**/
if ($fidDB[template]) {
Example #16
0
<?php

require dirname(__FILE__) . "/" . "global.php";
//栏目导航
get_guide($fid);
if (!is_writable(ROOT_PATH . "cache/htm_cache/{$cacheid}_makelist.php")) {
    showerr("/cache/htm_cache/{$cacheid}_makelist.php文件不存在,或文件不可写");
}
set_time_limit(0);
$fidDB = $db->get_one("SELECT S.*,M.alias AS M_alias,M.config AS M_config FROM {$pre}sort S LEFT JOIN {$pre}article_module M ON S.fmid=M.id WHERE S.fid='{$fid}'");
$fidDB[M_alias] || ($fidDB[M_alias] = '文章');
$fidDB[M_config] = unserialize($fidDB[M_config]);
$fidDB[config] = unserialize($fidDB[config]);
$fidDB[descrip] = En_TruePath($fidDB[descrip], 0);
if ($fidDB[type] == 2) {
    $rsdb[content] = $fidDB[descrip];
}
$fupId = intval($fidDB[type] ? $fid : $fidDB[fup]);
//相关栏目名称模板
if (is_file(html("{$webdb['SideSortStyle']}"))) {
    $sortnameTPL = html("{$webdb['SideSortStyle']}");
} else {
    $sortnameTPL = html("side_sort/0");
}
//栏目介绍模板
$aboutsortTPL = html("aboutsort_tpl/0");
//大分类显示方式
$fidDB[config][ListShowBigType] || ($fidDB[config][ListShowBigType] = 0);
unset($bigsortTPL);
if ($fidDB[fmid] && !$fidDB[config][ListShowBigType]) {
    $bigsortTPL = html("bigsort_tpl/mod_{$fidDB['fmid']}");
Example #17
0
<?php

!function_exists('html') && exit('ERR');
if (!$lfjuid) {
    showerr("请先登录!");
}
if (!$web_admin) {
    $rs = $db->get_one("SELECT C.uid FROM `{$pre}vote_element` V LEFT JOIN `{$pre}vote_topic` C ON V.cid=C.cid WHERE V.id='{$id}'");
    if ($rs[uid] != $lfjuid || !$lfjuid) {
        showerr("你没权限!");
    }
}
$db->query("DELETE FROM `{$pre}vote_element` WHERE id='{$id}'");
refreshto($FROMURL, "删除成功", 1);
Example #18
0
<?php

!function_exists('html') && exit('ERR');
if (!$webdb[yeepay_id]) {
    showerr('系统没有设置易宝支付收款商户编号,所以不能在线支付');
} elseif (!$webdb[yeepay_key]) {
    showerr('系统没有设置易宝支付密钥,所以不能在线支付');
}
//齐博CMS
if (!function_exists("iconv")) {
    function iconv($s, $d, $string)
    {
        require_once ROOT_PATH . "inc/class.chinese.php";
        $cnvert = new Chinese("GB2312", "UTF8", $string, ROOT_PATH . "./inc/gbkcode/");
        $string = $cnvert->ConvertIT();
        return $string;
    }
}
$p1_MerId = $webdb[yeepay_id];
$merchantKey = $webdb[yeepay_key];
//include 'merchantProperties.php'
/*
* @Description 易宝支付产品通用接口范例 
* @V3.0
* @Author rui.xin
*/
#	产品通用接口正式请求地址
$reqURL_onLine = "https://www.yeepay.com/app-merchant-proxy/node";
#	产品通用接口测试请求地址
#$reqURL_onLine = "http://tech.yeepay.com:8080/robot/debug.action";
# 业务类型
Example #19
0
    echo "<META HTTP-EQUIV=REFRESH CONTENT='0;URL=?job=list'>";
    exit;
} elseif ($action == 'order') {
    if (!$buyid) {
        showerr("请不要重复提交");
    }
    if (!ereg("[0-9]+", $buyid)) {
        showerr("你并没有购买任何一件商品");
    }
    if (!$buyer) {
        showerr("顾客姓名不能为空");
    } elseif (!$mobphone) {
        showerr("联系手机号码不能为空");
    }
    if (!ereg("^1[0-9]{10}\$", $mobphone)) {
        showerr("手机号码有误");
    }
    $buyer = filtrate($buyer);
    $sex = filtrate($sex);
    $telphone = filtrate($telphone);
    $mobphone = filtrate($mobphone);
    $email = filtrate($email);
    $oicq = filtrate($oicq);
    $postalcode = filtrate($postalcode);
    $sendType = filtrate($sendType);
    $payType = filtrate($payType);
    $address = filtrate($address);
    $otherSay = filtrate($otherSay);
    $array = explode(",", $buyid);
    unset($orderid);
    $totalmoney = 0;
Example #20
0
    }
    if ($step == 2) {
        $login = $userDB->login($username, $password, $cookietime);
        if ($login == 0) {
            showerr("当前用户不存在,请重新输入");
        } elseif ($login == -1) {
            showerr("密码不正确,点击重新输入");
        }
        //放在登录成功后再审核的话,主要是方便不需要用户再输入帐号密码
        if ($webdb['yzImgLogin']) {
            if (!check_imgnum($yzimg)) {
                $userDB->quit();
                $msg = $yzimg ? '验证码不正确!请重新输入' : '请输入验证码';
                showerr('<CENTER><form name="form1" method="post" action="">' . $msg . '<br>验证码:<input type="text" style="width:70px" name="yzimg"><SCRIPT LANGUAGE="JavaScript">
				<!--
				document.write(\'<img border="0" name="imageField" onclick="this.src=this.src+Math.random();" src="' . $webdb[www_url] . '/do/yzimg.php?\'+Math.random()+\'">\');
				//-->
				</SCRIPT><br><input type="hidden" name="username" value="' . $username . '"><input type="hidden" name="password" value="' . $password . '"><input type="hidden" name="cookietime" value="' . $cookietime . '"><input type="submit" name="Submit" value=" 提 交 "> <input type="hidden" name="step" value="2"></form></CENTER>');
            }
        }
        //通行证处理
        if ($_COOKIE[passport_url] || $_POST[passport_url]) {
            $passport_url = urldecode($_COOKIE[passport_url] ? $_COOKIE[passport_url] : $_POST[passport_url]);
            setcookie('passport_url', '');
            $userDB->passport_server($username, $passport_url);
        }
        if ($fromurl && !eregi("login\\.php", $fromurl) && !eregi("reg\\.php", $fromurl)) {
            $jumpto = $fromurl;
        } elseif ($FROMURL && !eregi("login\\.php", $FROMURL) && !eregi("reg\\.php", $FROMURL)) {
            $jumpto = $FROMURL;
        } else {
Example #21
0
    $typedb[$type] = " checked ";
} else {
    $typedb[title] = " checked ";
}
$mid = intval($mid);
$module_select = "<select name='mid' onChange=\"window.location.href='?mid='+this.options[this.selectedIndex].value\"><option value='0'  style='color:#aaa;'>所有模型</option>";
foreach ($module_db as $key => $value) {
    $ckk = $mid == $key ? ' selected ' : ' ';
    $module_select .= "<option value='{$key}' {$ckk}>{$value}</option>";
}
$module_select .= "</select>";
if ($mid) {
    $SQL = " AND mid='{$mid}' ";
} else {
    $SQL = "";
}
$fid_select = "<select name='fid' onChange=\"if(this.options[this.selectedIndex].value=='-1'){alert('你不能选择大分类');}\"><option value='0' style='color:#aaa;'>所有栏目</option>";
foreach ($Fid_db[0] as $key => $value) {
    $fid_select .= "<option value='-1' style='color:red;'>{$value}</option>";
    foreach ($Fid_db[$key] as $key2 => $value2) {
        $ckk = $fid == $key2 ? ' selected ' : ' ';
        $fid_select .= "<option value='{$key2}' {$ckk}>&nbsp;&nbsp;|--{$value2}</option>";
    }
}
$fid_select .= "</select>";
if (!$mid) {
    showerr('MID不存在');
}
require ROOT_PATH . "inc/head.php";
require getTpl("search_" . intval($mid));
require ROOT_PATH . "inc/foot.php";
Example #22
0
} elseif ($action == 'add' && $Apower[menu_list]) {
    if (!$postdb[name]) {
        showerr("名称不能为空");
    }
    if (!$postdb['linkurl']) {
        showerr("链接地址不能为空");
    }
    $postdb[name] = filtrate($postdb[name]);
    $postdb[linkurl] = filtrate($postdb[linkurl]);
    $db->query("INSERT INTO `{$pre}menu` (`fid`, `name`, `linkurl`, `color`, `target`, `moduleid`, `hide`, `list`,`ckname`) VALUES ('{$fid}', '{$postdb['name']}', '{$postdb['linkurl']}', '{$postdb['color']}', '{$postdb['target']}', 0, '{$postdb['hide']}', '{$postdb['list']}','{$postdb['ckname']}')");
    menu_cache();
    jump("添加成功", "?lfj=guidemenu&job=list", 1);
} elseif ($action == 'delete' && $Apower[menu_list]) {
    $rs = $db->get_one("SELECT * FROM {$pre}menu WHERE moduleid=0 AND type=0 AND fid='{$id}'");
    if ($rs) {
        showerr("请先删除子菜单或者把子菜单移走.才能删除此菜单");
    }
    $db->query("DELETE FROM `{$pre}menu` WHERE id='{$id}'");
    menu_cache();
    jump("删除成功", "?lfj=guidemenu&job=list", 1);
} elseif ($action == "editlist" && $Apower[menu_list]) {
    foreach ($order as $key => $value) {
        $db->query("UPDATE {$pre}menu SET list='{$value}' WHERE id='{$key}'");
    }
    menu_cache();
    jump("修改成功", "?lfj=guidemenu&job=list", 1);
} elseif ($action == "setShowMenu" && $Apower[menu_list]) {
    write_config_cache($webdbs);
    jump("修改成功", "?lfj=guidemenu&job=list", 1);
}
function menu_cache()
Example #23
0
<?php

require dirname(__FILE__) . "/" . "global.php";
if (ereg("^([-_0-9a-zA-Z]+)\$", $hack)) {
    if (is_file(ROOT_PATH . "hack/{$hack}/member.php")) {
        include ROOT_PATH . "hack/{$hack}/member.php";
    } else {
        showerr("нд╪Ч╡╩╢Фтз", 1);
    }
}
Example #24
0
$_pre = "{$pre}{$webdb[module_pre]}";
//数据表前缀
$Module_db = new Module_Field(Mpath);
//自定义模型相关
$Murl = $webdb[www_url] . '/' . Mdirname;
//本模块的访问地址
$Mdomain = $ModuleDB[$webdb[module_pre]][domain] ? $ModuleDB[$webdb[module_pre]][domain] : $Murl;
unset($foot_tpl, $head_tpl, $index_tpl, $list_tpl, $bencandy_tpl);
$ch = intval($ch);
$fid = intval($fid);
$id = intval($id);
$page = intval($page);
$cid = intval($cid);
if ($webdb[module_close]) {
    $webdb[Info_closeWhy] = str_replace("\r\n", "<br>", $webdb[Info_closeWhy]);
    showerr("本系统暂时关闭:{$webdb['Info_closeWhy']}");
}
function list_hr_member($type = 'new', $rows = 10)
{
    global $db, $pre, $_pre, $module_DB, $Module_db;
    if ($type == 'new') {
        $SQL = " ORDER BY A.id DESC LIMIT {$rows}";
    } elseif ($type == 'com') {
        $SQL = " WHERE A.levels=1 ORDER BY A.levelstime DESC LIMIT {$rows}";
    }
    $query = $db->query("SELECT A.*,B.* FROM {$_pre}person A LEFT JOIN {$_pre}content_2 B ON B.id=A.id {$SQL}");
    while ($rs = $db->fetch_array($query)) {
        $Module_db->showfield($module_DB[2][field], $rs, 'list');
        $listdb[] = $rs;
    }
    return $listdb;
Example #25
0
    $min = ($page - 1) * $rows;
    $query = $db->query("SELECT * FROM {$_pre}comments WHERE uid='{$lfjuid}' ORDER BY cid DESC LIMIT {$min},{$rows}");
    while ($rs = $db->fetch_array($query)) {
        $rs[content] = preg_replace("/<([^<]+)>/is", "", $rs[content]);
        $rs[title] = get_word($rs[content], 70);
        if (!$rs[username]) {
            $detail = explode(".", $rs[ip]);
            $rs[username] = "{$detail['0']}.{$detail['1']}.{$detail['2']}.*";
        }
        $rss = $db->get_one("SELECT city_id FROM {$_pre}db WHERE id='{$rs['id']}'");
        $rs[url] = get_info_url($rs[id], $rs[fid], $rss[city_id]);
        $rs[posttime] = date("Y-m-d H:i", $rs[posttime]);
        $listdb[] = $rs;
    }
    require ROOT_PATH . "member/head.php";
    require dirname(__FILE__) . "/" . "template/comment/mylist.htm";
    require ROOT_PATH . "member/foot.php";
} elseif ($action == "del") {
    if (!$ciddb) {
        showerr("请选择一个");
    }
    foreach ($ciddb as $key => $value) {
        $rs = $db->get_one("SELECT * FROM {$_pre}comments WHERE cid='{$value}'");
        if ($rs[uid] = $lfjuid || ($rs[cuid] = $lfjuid)) {
            $db->query("DELETE FROM {$_pre}comments WHERE cid='{$value}'");
            $_erp = $Fid_db[tableid][$rs[fid]];
            $db->query("UPDATE {$_pre}content{$_erp} SET comments=comments-1 WHERE id='{$rs['id']}'");
        }
    }
    refreshto("{$FROMURL}", "删除成功", 1);
}
Example #26
0
/**
 * @brief redirect to QQ login page
 *        rfc1738 urlencode
 * @param $appid
 * @param $appkey
 * @param $callback
 */
function redirect_to_login($appid, $appkey, $callback)
{
    //授权登录页
    $redirect = "http://openapi.qzone.qq.com/oauth/qzoneoauth_authorize?oauth_consumer_key={$appid}&";
    //获取request token
    $result = array();
    $request_token = get_request_token($appid, $appkey);
    parse_str($request_token, $result);
    //request token, request token secret 需要保存起来
    //在demo演示中,直接保存在全局变量中.真实情况需要网站自己处理
    //$_SESSION["token"]        = $result["oauth_token"];
    //$_SESSION["secret"]       = $result["oauth_token_secret"];
    set_cookie('token_secret', mymd5($result["oauth_token"] . "\t" . $result["oauth_token_secret"]), 3600);
    if ($result["oauth_token"] == "") {
        showerr('API信息不对!');
        //demo中不对错误情况做处理
        //网站需要自己处理错误情况
        // exit;
    }
    //302跳转到授权页面
    $redirect .= "oauth_token=" . $result["oauth_token"] . "&oauth_callback=" . rawurlencode($callback);
    header("Location:{$redirect}");
}
Example #27
0
    while ($rs = $db->fetch_array($query)) {
        $Module_db->showfield($module_DB[2]['field'], $rs, 'list');
        $rs[username] || ($rs[username] = $rs[ip]);
        $rs[posttime] = date("Y-m-d H:i:s", $rs[posttime]);
        $rs[del] = " <A HREF='?action=delete_apply&id={$rs['apply_id']}'>踢除</A>";
        $listdb[] = $rs;
    }
    $showpage = getpage('', '', "?job={$job}", $rows, $totalNum);
    require ROOT_PATH . "member/head.php";
    require Memberpath . "template/list_job_member.htm";
    require ROOT_PATH . "member/foot.php";
} elseif ($action == 'delete_apply') {
    //踢除某职位下的其中一个应聘者
    $r = $db->get_one("SELECT * FROM `{$_pre}apply` WHERE id='{$id}'");
    $rs = $db->get_one("SELECT * FROM `{$_pre}content` WHERE cid='{$r['cid']}'");
    if ($rs[uid] != $lfjuid) {
        showerr("非法踢除!");
    }
    $db->query("DELETE FROM {$_pre}apply WHERE id='{$id}'");
    refreshto($FROMURL, '踢除成功', 1);
} elseif ($action == "del") {
    //删除某职位
    $rs = $db->get_one("SELECT * FROM `{$_pre}content` WHERE id='{$id}' AND uid={$lfjuid}");
    if (!$rs) {
        showerr("非法删除!");
    }
    $db->query("DELETE FROM `{$_pre}content` WHERE `id` = '{$id}'");
    $db->query("DELETE FROM `{$_pre}content_1` WHERE `id` = '{$id}'");
    $db->query("DELETE FROM `{$_pre}apply` WHERE `cid` = '{$id}'");
    refreshto($FROMURL, '删除成功', 1);
}
Example #28
0
    $gudie = getGuide($rsdb[fup], "{$admin_path}&job=listsort&fid=");
    get_admin_html('editsort');
} elseif ($action == "editsort") {
    $db->query("UPDATE {$_pre}class SET name='{$postdb['name']}' WHERE fid='{$postdb['fid']}' ");
    refreshto("{$FROMURL}", "修改成功");
} elseif ($action == "delete") {
    if (!$fid_db && $fid) {
        $fid_db[] = $fid;
    }
    if (!$fid_db) {
        showerr("请选择一个!");
    }
    foreach ($fid_db as $fid) {
        extract($db->get_one("SELECT COUNT(*) AS NUM FROM `{$_pre}class` WHERE fup='{$fid}'"));
        if ($NUM) {
            showerr("请先删除子分类");
        }
        $db->query("DELETE FROM `{$_pre}class` WHERE fid='{$fid}'");
    }
    refreshto("{$FROMURL}", "删除成功", 0);
} elseif ($action == "editlist") {
    foreach ($order as $key => $value) {
        $db->query("UPDATE {$_pre}class SET list='{$value}' WHERE fid='{$key}' ");
    }
    refreshto("{$FROMURL}", "修改成功", 1);
}
function getGuide($fid, $url)
{
    global $db, $_pre;
    $query = $db->query("SELECT * FROM {$_pre}class WHERE fid='{$fid}' ");
    while ($rs = $db->fetch_array($query)) {
Example #29
0
<?php

require dirname(__FILE__) . "/" . "global.php";
//安装有店铺的情况
if (is_table("{$pre}hy_company")) {
    if (!$db->get_one("SELECT * FROM `{$pre}hy_company` WHERE uid='{$lfjuid}'")) {
        echo "<META HTTP-EQUIV=REFRESH CONTENT='0;URL={$webdb['www_url']}/hy/member/post_company.php'>";
        exit;
    }
    echo "<META HTTP-EQUIV=REFRESH CONTENT='0;URL={$webdb['www_url']}/hy/member/homepage_ctrl.php?atn=info'>";
    exit;
} else {
    showerr('你没有安装黄页模块');
}
Example #30
0
<?php

define('Memberpath', dirname(__FILE__) . '/');
require Memberpath . "../inc/common.inc.php";
@(include ROOT_PATH . "data/level.php");
@(include_once ROOT_PATH . "data/all_fid.php");
//全部栏目配置文件
@(include ROOT_PATH . "data/article_module.php");
if (!$webdb[web_open]) {
    $webdb[close_why] = str_replace("\n", "<br>", $webdb[close_why]);
    showerr("网站暂时关闭:{$webdb['close_why']}");
}
if ($id || $aid) {
    if (strlen($aid ? $aid : $id) > 8 && !in_array($erp = get_id_table($aid ? $aid : $id), $Fid_db[iftable])) {
        unset($erp);
    }
}
$id = intval($id);
$aid = intval($aid);
$tid = intval($tid);
/**
*允许哪些IP访问
**/
$IS_BIZ && Limt_IP('AllowVisitIp');